From the course: Oracle Cloud Infrastructure Foundations

Unlock this course with a free trial

Join today to access over 23,200 courses taught by industry experts.

AuthN and AuthZ

AuthN and AuthZ

(ambient music) - Welcome back to this lesson on authentication and authorization. Before we get into more specific details, let's look at what is a principle. A principle is an IAM entity that is allowed to interact with OCI resources. There are two kinds of principles, primarily, in OCI. One is your users, think about people who are logging onto your console or using your CLI or SDKs: users, human beings actually using your cloud resources, and then the resources themselves can be principles. So, a good example of a resource principle is an instance principle, which is actually an instance which becomes a principle, which means that it can make API calls against other OCI services like storage. Also, when we talk about principles, we have groups, and groups are basically collections of users who have the same type of access requirements to resources. So you can have a storage admin group where you could group all the…

Contents